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0> : Abstract 

p • We describe a cryptographic protocol in which Wheeler's delayed 

choice experiment is used to generate the key distribution. The proto- 
Ch I col, which uses photons polarized only along one axis, is secure against 

^ ' general attacks. 
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In 1970, Wiesner wrote a highly innovative paper about quantum cryp- 
tography, introducing a new branch of Physics and computation. Unfortu- 
nately, his idea went unnoticed, and his paper was not published until 1983 
[||]). Wiesner's idea was brought back to life in 1980s primarily by the work 
of Bennett, Brassard 0. Bennett et al. have recently reported the experi- 
mental realization of the first quantum cryptographic protocol 0. 

Theoretical models for quantum key distributions have been proposed 
based on uncertainty principle 0, EPR |Q states 0, and any set of two non- 
orthogonal states 1^. Here we describe a model for quantum key distribution 
based on Wheeler's delayed choice experiment. 

Before proceeding, let us briefly describe Wheeler's delayed choice exper- 
iment (for detailed explanation see [0, especially Fig. 4; for consistency, we 
use Wheeler's notations). In the first arrangement, a single photon (or low 
intensity light pulse) comes in at 1 and encounters a beam splitter which 
splits it into two beams, 2a and 26, of equal intensity (See Fig. 4 of 0). 
The beams are reflected by mirrors A and S to a crossing point and are 
then detected by detectors 1 and 2. Thus one finds out by which route (2a 
or 2h) the photon came. In the second arrangement, a beam splitter ^5" is 
inserted at the point of crossing in front of detectors. The beams 2a and 2b 
are brought into constructive interference so that a count is always triggered 
from detector 1. Thus in this arrangement, one concludes that the photon 
came by both routes. In Wheeler's experiment: 

In the new "delayed-choice" version of the experiment one decides 
whether to put in the half-silvered mirror [beam splitter in front 
of detectors] or take it out at the very last minute. Thus one 
decides whether the photon "shall have come by one route, or by 
both routes" after it has already done its travel", (quote from 

With the above in mind, we now proceed to describe a model for quantum 
key distribution. The protocol, which is based on Wheeler's delayed choice 
experiment, consists of the following steps: 

(1) Alice prepares a sequence of n photons (or low intensity light pulses), 
all polarized in one direction. She randomly inserts the beam splitter 

in front of her photons. In those instances in which she has not inserted 
the beam splitter (approximately for ^ photons), she randomly sends the 
photons along route 2a or 2b. Thus approximately ^ photon are sent along 
route 2a, and another ^ photons are sent along route 2b. 

(2) Bob randomly (and of course, independent of Alice) inserts his beam 
splitter in front of his detectors. Thus approximately ^ photons are 
detected with the beam splitter |5" in front of the detectors and another ^ 
photons are detected with the beam splitter removed. 
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(3) Alice tells Bob (and to any adversary who may be listening) in each in- 
stance whether she inserted the beam splitter in front of her photon. Bob 
also announces publicly to Alice in each instance whether he inserted the 
beam splitter |S" in front of his detectors. 

(4) Alice and Bob discard all instances in which Bob failed to register a par- 
ticle. 

(5) Bob tests the key distribution by checking that in all instances in which 
only one of them (either he or Alice) inserted the beam splitter (but the 
other one did not), detectors 1 and 2 were triggered with equal probability, 
and in all instances in which they both inserted their beam splitters, only 
detector 1 was triggered, i.e., beams 2a and 2b interfered constructively. If 
these conditions are satisfied, then Bob informs Alice that there was not any 
eavesdropping. They then keep the data only from instances in which they 
both happened to remove their beam splitters (approximately for ^ pho- 
tons). 

(6) Alice interprets her data as a binary sequence according to the following 
coding scheme: 

The photon is sent along route 2a = 0, 
The photon is sent along route 2b = 1. 

The experimental arrangement is such that when the beam splitters are re- 
moved, detector 1(2) is triggered, when the photon came by route 2a(26) (see 
Fig. 4 of 0). Thus Bob interprets his data as a binary sequence according 
to the following coding scheme: 

Detector 1 is triggered, thus the photon came by route 2a = 0, 
Detector 2 is triggered, thus the photon came by route 2b = 1. 

(7) With this coding scheme, Alice and Bob have acquired a random bit 
sequence with high level of confidence that no one else knows it. 

One advantage of the above protocol is that the photons are all polar- 
ized along one axis, for example along the x axis. Thus the photons that 
Alice sends to Bob (perhaps through a fiber) all suffer the same transmission 
loss while in transit (note that transmission loss depends on polarization). 
In contrast, schemes which use photons polarized in different directions are 
susceptible to different transmission losses for different photons. 
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